Learn about policy management based on groups
You can manage assignments of devices, apps, and policies based on groups of users or devices.
You can add the following types of groups:
- Assigned groups: Manually add users or devices into a static group.
- Dynamic groups (Requires Microsoft Entra ID P1 or P2): Automatically add users or devices to user groups or device groups based on an expression you create.
Devices
To make managing devices easier, you can use Microsoft Intune device categories to automatically add devices to groups based on categories that you define.
Device categories use the following workflow:
- Create categories from which users can choose when they enroll their device.
- When users of iOS/iPadOS and Android devices enroll a device, they must choose a category from the list of categories you configured. To assign a category to a Windows device, users must use the Company Portal website.
- You can then deploy policies and apps to these groups.
You can create any device categories you want. For example:
- Point-of-sale device
- Demonstration device
- Sales
- Accounting
- Manager
After your device is enrolled, it becomes managed. Your organization can assign policies and apps to the device through a mobile device management (MDM) provider, such as Intune.